Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-97277
HistoryDec 13, 2023 - 12:00 a.m.

Siemens User Management Component (UMC) Cross-Site Scripting Vulnerability

2023-12-1300:00:00
China National Vulnerability Database
www.cnvd.org.cn
12
siemens
user management component
umc
opcenter quality
sinumerik
cross-site scripting
vulnerability
quality management system
distributed control system
digital automation services
centralized maintenance
javascript code

6.1 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.0%

Opcenter Quality is a quality management system (QMS) that enables organizations to safeguard compliance, optimize quality, reduce the cost of defects and rework, and achieve operational excellence by improving process stability. simatic pcs neo is a distributed control system (DCS). the SINUMERIK integrated product suite helps to achieve simple networking of machine tools in the IT of the production environment. Totally Integrated Automation Portal (TIA Portal) is PC software that offers the complete range of Siemens digital automation services, from digital planning and integrated engineering to transparent operation. user Management Component (UMC) is an integrated component that enables centralized system-wide maintenance for users. A cross-site scripting vulnerability exists in Siemens User Management Component (UMC), which can be exploited by an attacker to inject arbitrary JavaScript code.

6.1 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.0%

Related for CNVD-2023-97277